$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa File: d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa (raw, json) Hash identifier: MlZKU4pQMr37/XVBIdj572iKdLf+0TuCD75CxyuvnLI= Subject key identifier: EA:15:94:50:50:7F:84:64:29:8D:1A:10:71:C3:5F:80:09:9A:06:1A Certificate issuer: /CN=10c21a82-48fa-4568-908e-8e488e55c411 Certificate serial: 010D0C9F4328584BBE402AA879A34E07F57A7E80 Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 398717 IP address blocks: 45.59.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2a:a8:79:a3:4e:07:f5:7a:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=198897b1-d095-4272-85b8-9aac987f303a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:bc:66:00:e4:6d:08:69:e1:80:a8:7b:6e: 56:6e:4d:64:09:53:4d:bb:ad:76:a7:e6:cd:60:54: 7a:98:76:2c:ae:b9:49:03:39:47:d6:d9:29:36:16: ee:5a:f8:a5:06:66:dd:7a:48:b9:70:41:e9:bc:04: 59:9d:ec:ef:b0:ef:1e:eb:d6:20:3a:29:e5:b3:cd: 64:8c:21:4e:9e:c6:26:3d:16:b0:88:6e:e0:2f:ab: f6:7e:30:be:08:ef:df:f1:23:64:43:cf:d0:4d:f0: e5:8c:34:51:88:09:4d:5b:ad:a9:96:a6:8c:98:d5: 23:55:68:72:f6:de:ac:6d:08:b8:6c:bd:2f:14:a8: 39:20:4b:95:2b:f7:fa:10:a8:1f:8d:48:7c:e1:3b: 09:77:70:80:c9:1c:52:0b:2c:76:d7:f2:db:94:aa: a4:db:de:8e:f4:74:17:a8:64:75:83:cd:5b:a4:c2: 92:ca:a0:5d:60:9b:8a:0b:de:a2:3a:2d:93:fa:1d: 60:3b:85:59:82:64:07:a6:5e:5a:69:cc:a8:5a:9a: 48:1d:29:9a:43:a4:0f:4e:45:ad:c0:ff:c5:d0:49: ca:c7:82:ac:9d:cf:2a:cb:c9:fa:08:a5:82:06:44: e1:b3:59:42:55:ea:e5:91:69:80:47:23:42:f4:ea: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:94:50:50:7F:84:64:29:8D:1A:10:71:C3:5F:80:09:9A:06:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl X509v3 Authority Key Identifier: keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer sbgp-ipAddrBlock: critical IPv4: 45.59.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:22:d3:02:2f:f9:24:3a:82:e7:71:a5:c6:23:3f:f7:52:1d: db:e1:b3:6a:af:1c:1f:eb:6d:af:81:37:3e:02:73:ed:4d:ac: 25:bc:64:57:07:86:b6:93:99:bb:f9:9a:d8:6b:4c:68:97:49: 39:48:d2:c9:4f:fa:7b:3e:bc:f1:ac:d1:81:51:5d:65:53:60: ae:e3:9e:54:1e:b7:c9:c8:73:36:38:7d:8d:5f:06:56:4f:57: 5e:0b:1c:5b:17:92:9f:a2:8c:ef:a6:06:b3:99:7f:15:6f:36: 40:20:92:ad:ad:ff:5c:88:14:82:22:55:2f:ee:12:1a:1f:a9: 3e:64:56:41:c5:62:44:22:fa:90:6f:38:21:d7:f3:45:c5:a8: 99:c2:19:b0:1b:ff:5b:82:fc:a2:0e:88:bb:25:1a:17:27:fa: 93:a0:49:07:49:ef:05:6e:02:6b:dc:78:b8:0c:d4:b6:90:7a: 4b:25:b5:64:2d:24:ff:62:ad:90:3e:20:84:db:9c:b5:7b:3c: d1:5c:0e:21:aa:8d:71:e2:38:dc:c5:82:16:7a:27:f0:ec:d8: 96:69:fe:2f:4f:42:e4:b3:0d:a9:6b:83:f4:05:44:a8:1c:e4: 84:4f:2f:c2:3d:7c:54:9b:fe:0c:10:e8:2c:92:5c:73:99:a6: 0e:f2:2a:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCqoeaNOB/V6foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBjMjFhODItNDhmYS00NTY4LTkwOGUtOGU0ODhlNTVj NDExMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MTk4ODk3YjEtZDA5NS00MjcyLTg1YjgtOWFhYzk4N2YzMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYK8ZgDkbQhp4YCoe25Wbk1kCVNNu612p+bN YFR6mHYsrrlJAzlH1tkpNhbuWvilBmbdeki5cEHpvARZnezvsO8e69YgOinls81k jCFOnsYmPRawiG7gL6v2fjC+CO/f8SNkQ8/QTfDljDRRiAlNW62plqaMmNUjVWhy 9t6sbQi4bL0vFKg5IEuVK/f6EKgfjUh84TsJd3CAyRxSCyx21/LblKqk296O9HQX qGR1g81bpMKSyqBdYJuKC96iOi2T+h1gO4VZgmQHpl5aacyoWppIHSmaQ6QPTkWt wP/F0EnKx4Ksnc8qy8n6CKWCBkThs1lCVerlkWmARyNC9OpHdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoVlFBQf4RkKY0aEHHDX4AJmgYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMGMy MWE4Mi00OGZhLTQ1NjgtOTA4ZS04ZTQ4OGU1NWM0MTEvZDEwYzFiN2EtMWM2OS0z YmU5LWE4YjktM2QyOGEyNzExY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTBjMjFhODItNDhmYS00NTY4LTkw OGUtOGU0ODhlNTVjNDExLzEwYzIxYTgyLTQ4ZmEtNDU2OC05MDhlLThlNDg4ZTU1 YzQxMS5jcmwwHwYDVR0jBBgwFoAUk6UjHkfHssxyd3A5rvrIxv60gK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMGMyMWE4Mi00OGZhLTQ1NjgtOTA4ZS04ZTQ4 OGU1NWM0MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTu8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIci0wIv+SQ6gudxpcYjP/dSHdvhs2qvHB/rba+BNz4Cc+1NrCW8ZFcH hraTmbv5mthrTGiXSTlI0slP+ns+vPGs0YFRXWVTYK7jnlQet8nIczY4fY1fBlZP V14LHFsXkp+ijO+mBrOZfxVvNkAgkq2t/1yIFIIiVS/uEhofqT5kVkHFYkQi+pBv OCHX80XFqJnCGbAb/1uC/KIOiLslGhcn+pOgSQdJ7wVuAmvceLgM1LaQeksltWQt JP9irZA+IITbnLV7PNFcDiGqjXHiONzFghZ6J/Ds2JZp/i9PQuSzDalrg/QFRKgc 5IRPL8I9fFSb/gwQ6CySXHOZpg7yKq0= -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:33 2025 by rpki-client